REMARKS 

In the Office Action mailed June 23, 2005 Claims 1-25 are currently pending. Claims 1- 
4, 8-16, and 22-25 stand rejected under 35 U.S.C. § 102(e) as being anticipated by Justice, Jr. et 
al. (U.S. Patent No. 6,418,469). Claims 19-20 stand rejected under 35 U.S.C. § 102(b) as being 

5 anticipated by Gaffaney et al. (U.S. Patent No. 5,634,008). Claims 5-7 stand rejected under 35 
U.S.C. § 103(a) as being unpatentable over Justice, Jr. et al. (U.S. Patent No. 6,418,469) in view 
of Kline (U.S. Patent No. 4,080,589). Claims 17-18, stand rejected under 35 U.S.C. § 103(a) as 
being unpatentable over Justice, Jr. et al. (U.S. Patent No. 6,418,469) in view of Gaffeney et al. 
(U.S. Patent No. 5,634,008). Claim 21 stands rejected under 35 U.S.C. § 103(a) as being 

10 unpatentable over Gaffaney et al. (U.S. Patent No. 5,634,008) in view of Justice, Jr. et al. (U.S. 
Patent No. 6,418,469. 

Applicants respectively traverse. After a carefiil review of the Office Action and the 
cited references, AppHcants respectively request reconsideration in view of the following 
remarks. 

15 L CLAIM REJECTIONS UNDER 35 U.S.C, S 102(e) 

Claims 1-4, 8-16, and 22-25 stand rejected under 35 U.S.C. § 102(e) as being anticipated 
by Justice, Jr. et al. (U.S. Patent No. 6,418,469). Claims 19-20 stand rejected under 35 U.S.C. § 
102(b) as being anticipated by Gaffaney et al. (U.S. Patent No. 5,634,008). Applicants 
respectively traverse. 

20 A. Applicant's Presently Claim hivention: Independent Claims L 8, 22. and 23 

Applicants' presently claimed invention generally relates to an apparatus and method for 
the management of a network, and more particularly to a network management apparatus and 
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method capable of generating events when predefined significant conditions are detected. 
(Applicants' Specification at p. 1 lines 6-9). 

Applicants' presently claimed invention is generally directed to methods and systems that 
processes received network management data, and determines if the network management data 
5 indicates that a previous (i.e., historical) event in the event log has been resolved and then 
changing a severity indicator of the previous event dependent on a determining step. 

For example, as Applicant's provide, Figure 2 illustrates a method in accordance with an 
embodiment of the present invention which may be employed by the network management 
station 3 A to address this difficulty. The method is preferably implemented in the form of a 
. 10 computer program forming part of a network management software application. It will be 
appreciated that the invention may be implemented in other forms such as hardware. 

At step 10, the program monitors the network using conventional monitoring techniques 
as described above. At step 20, the program receives network management data resulting from 
the monitoring in step 10. The network management data may be data retrieved from the 
15 network during the monitoring process, or may be data relating to events generated by the 
network management software application as a result of an event condition being observed 
during previous monitoring of the network or by the (real time) monitoring in step 10. 
(Applicants' Specification at p. 9 lines 7-19). 

At step 30 the program receives the data from step 20 and considers whether it resolves 
20 an existing event in the event list, i.e. an event received previously ("previous event"). The 
manner in which the program determines whether the data resolves an existing event is 
dependent on the type of data and/or event, and examples are given below in relation to the 
preferred embodiments illustrated in Figures 3 to 5. 

MCDONNELL BOEHNEN 9 

HULBERT & BERGHOFF LLP 

300 SOUTH WACKER DRIVE, 32ND FLOOR 

CHICAGO, IL 60606 

(312)9134001 



If step 30 determines that the data received from step 20 does not resolve an existing 
event, the program continues with step 40. At step 40, if the data from step 20 indicates a 
recordable event condition, the program generates and logs an unresolved event in the event log 
and returns to step 10. (Applicants' Specification at p. 1 lines 21-30). 
5 It will be appreciated that in some embodiments, if the data received at step 20 relates to 

(recordable) events which resolve previous events, then such events are preferably not placed in 
the event list for presentation to the user, but instead the existing event is marked as resolved in 
the event list. 

In certain preferred embodiments, illustrated in Figures 2, 3 and 4, the program is carried 
.10 out in real time in response to the network management application receiving network 

management data from the network. This ensures that the event list is updated continuously so 
that the event list presented to the network administrator always indicates the current state of the 
network. It will be appreciated that in other embodiments the program could be used by the 
network administrator to process a plurality of events already appearing in the event list to 
15 determine which events are resolved. 

In addition, in the preferred embodiments, the program not only marks resolved events as 
resolved, but also changes the severity of the resolved event. In particular, a different severity 
may be applied to all resolved events, or the severity may be reduced according to the type of 
event. By changing the severity indication of a resolved event, the network administrator can 
20 apply conventional filters to the event list to remove resolved events. The filtered list then only 
includes unresolved events. In addition, if the severity for resolved events is reduced to "Low", 
management systems with limited memory space for the event log will automatically 



MCDONNELL BOEHNEN 1 0 

HULBERT & BERGHOFF LLP 

300 SOUTH WACKER DRIVE, 32ND FLOOR 

CHICAGO, IL 60606 

(312)9134001 



preferentially delete these events along with other low severity events. (Applicants' 
Specification at p. 10 lines 1-29). 

The presently pending Independent Claims 1, 8, 22, and 23 are directed to such a method 
and system. For example, Independent Claim 1 expressly recites a method for processing 

5 network management data received by a network management system during the monitoring of a 
network comprising the step of receiving network management data, and determining if the 
network management data indicates the resolution of a previous event generated by the network 
management system in response to previously received network management data and changing 
a severity indicator of said previous event dependent on said determining step . Independent 

10 Claims 8, 22, and 23 have been amended to include similar limitations. 

B. Neither Justice '469 Nor Gaffaney '008 Teach or Suggest 
Changing a Severity Indicator of a Previous Event 

Neither Justice '469 nor Gaffaney '008 teach or suggest changing a severity indicator of a 

previous event as expressly claimed in Applicant's presently pending Independent Claims 1,8, 

15 22, and 23. For example, the June 23, 2005 Office Action contends that at Col. 1, lines 25-67, 
Justice '469 discloses receiving network management data and determining if the network 
management data indicates the resolution of a previous event generated by the network 
management system in response to previously received network management data. June 23, 
2005 Office Action at p. 2. However, at Col. 1, lines 25-67 of Justice '469, there is simply no 

20 teaching or suggestion of Applicants' step of "determining if the network management data 
indicates the resolution of a previous event generated by the network management system in 
response to previously received network management data and changing a severity indicator of 
said previous event dependent on said determining step." 
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Gaffaney '008 fails for a similar reason. For example, the June 23, 2005 Office Action 
contends that at Col. 4, lines 34-50 and Col. 5, lines 1-49, Gaffaney '008 discloses a method of 
processing event data generated by a network management system during the monitoring of a 
network, processing event data relating to events previously generated by the network 
5 management system a plurality of time and which may be entered in the event log as a recurring 
event, identifying an event to be processed from the vent list, and considering whether the 
condition which caused the event to be generated has occurred in a preceding time period. June 
23, 2005 Office Action at p. 5-6. However, at Col. 4, lines 34-50 and Col. 5, lines 1-49 of 
Gaffaney '008, there is simply no teaching or suggestion of Applicants' step of "determining if 
.10 the network management data indicates the resolution of a previous event generated by the 

network management system in response to previously received network management data and 
changing a severity indicator of said previous event dependent on said determining step. 
C. Applicant's Presently Claim Invention: Independent Claims 13 and 19 
Claim 13 stands rejected under 35 U.S.C. § 102(e) as being anticipated by Justice, Jr. et 
15 al. (U.S. Patent No. 6,418,469) and Claim 19 stands rejected under 35 U.S.C. § 102(b) as being 
anticipated by Gaffaney et al. (U.S. Patent No. 5,634,008). Applicants respectively traverse. 

L Independent Claim 13 
Applicants have amended Independent Claims 13 and 19. Specifically, Claim 13 has 
been amended to expressly recite a method for processing data received in an asynchronous Trap 
20 by a network management system comprising the steps of receiving a Trap from the network; 
considering if the Trap indicates the possible resolution of a event in an event log, and if so 
fiirther considering if the Trap indicates the possible resolution of a further event in the event 
log. (emphasis added). 
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Support for this amendment is found at least in part in Applicants' specification at page 
16 line 29 to page 17 line 1, and Figure 4. For example, Applicants' state that events can be 
resolved by other types of trap. For example, a trap that says 'device not responding' could be 
resolved by a trap saying 'device sending errors'. The two are not complimentary but a device 
5 that is sending errors is at least available on the network. Justice '469 appears to use a Trap to 
identify whether an event has been resolved, but nowhere discloses or suggests considering if the 
trap indicates the possible resolution of a further event in the event log. 

The June 23, 2005 Office Action contends that at Col. 3, lines 26-67, Justice '469 
discloses a method for processing data received in an synchronous Trap by a network 

10 management system, the method comprising receiving a Trap from the network, considering if 
the Trap indicates the possible resolufion of a event in an event log, and if so considering 
whether the even log includes a previously received event that is resolved by the Trap. June 23, 
2005 Office Action at p. 4. However, in this cited portion of Jusfice '469 of Justice '469, there 
is simply no teaching or suggestion of Applicants' step of a method for processing data received 

15 in an asynchronous Trap by a network management system comprising the steps of receiving a 
Trap fi-om the network; considering if the Trap indicates the possible resolution of a event in an 
event log, and if so fixrther considering if the Trap indicates the possible resolution of a fiirther 
event in the event log , (emphasis added). 
1. Independent Claim 19 

20 Claim 19 has been amended to expressly recite a method for processing event data 

generated by a network management system during the monitoring of a network, the method 
processing event data relating to events previously generated by the network management system 
a plurality of times and which may be entered in the event log as a recurring event, the method 
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comprising identifying a recurring event to be processed from the event list; and considering 
whether the condition which caused the event to be generated has occurred in a preceding time 
period, (emphasis added). 

Support for this amendment is found at least in part in Applicants' specification at 

5 specification at page 18 lines 6 to 28. For example, Applicants' state that the present application 
discloses actively reviewing events in the event log to identify recurring events, and determining 
whether an event satisfying those conditions has occurred within the immediately preceding time 
period, i.e. whether the recurring event is still active. Gaffaney '008, on the other hand, appears 
to disclose a method for determining whether a detected event is a recurring event, it does not 

10 disclose identifying a recurring event from the event list and considering whether the condition 
which caused the event to be generated has occurred in a preceding time period, i.e. it does not 
pro-actively identify whether a recurring event is still active. 

The June 23, 2005 Office Action contends that at Col. 4, lines 34-50; Col. 5, lines 1-49, 
Gaffaney '008 allegedly discloses a method for processing event data generated by a network 

15 management system during the monitoring of a network, the method processing event data 
relating to events previously generated by the network management system a plurality of times 
and which may be entered in the event log as a recurring event, the method comprising 
identifying an event to be processed from the event list and considering whether the condition 
which caused the event to be generated has occurred in a preceding time period. June 23, 2005 

20 Office Action at p. 5-6. However, in this cited portion of Gaffaney '008, there is simply no 
teaching or suggestion of Applicants' step of a method for processing data received in an 
asynchronous Trap by a network management system comprising the steps of receiving a Trap 
from the network; considering if the Trap indicates the possible resolution of a event in an event 
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log, and if so further considering if the Trap indicates the possible resolution of a further event in 
the event log , (emphasis added). 

Consequently, Independent Claims 1, 8, 13, 19, 22, and 23 are allowable for at least all of 
the reasons stated above. The remaining claims are all dependent on these allowable 
5 independent claims and are therefore allowable for at least the reasons stated above. 
III. SUMMARY 

Applicants respectfully submit that, in view of the remarks above, the present application, 
including claims 1-25, is in condition for allowance and solicit action to that end. 

If there are any matters that may be resolved or clarified through a telephone interview, 
,10 the Examiner is respectfully requested to contact Apphcants' undersigned representative at (312) 



913-0001. 



Respectfully submitted, 

McDonnell Boehnen Hulbert & Berghoff LLP 
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